Increase version to 1.2.7

pkg/configmap.yaml

@@ -8,7 +8,6 @@ data:
     config:
       info_service:
         socket_address:
-          addr: "0.0.0.0"
           port: 9901
       adapter:
         envoy:
@@ -38,3 +37,5 @@ data:
       rc_token:
         rc_token_signing_key:
           filename: "/etc/ais/certs/rctoken.key"
+      api_config:
+        sec_fetch_mode_check: LAX

pkg/deployment.yaml

@@ -12,10 +12,10 @@ spec:
   - name: grpc
     port: 10003
     targetPort: 10003
-  - name: http
+  - name: http-jwks
     port: 10004
     targetPort: 10004
-  - name: info
+  - name: http-info
     port: 9901
     targetPort: 9901
 ---
@@ -38,21 +38,17 @@ spec:
     spec:
       containers:
       - name: authservice
-        image: gcr.io/gke-release/ais_preview:1.2.6  # kpt-set: ${image}
+        image: gcr.io/gke-release/asm_user_auth:1.2.7  # kpt-set: ${image}
         imagePullPolicy: IfNotPresent
         command:
-        - /usr/bin/ais_preview
+        - /usr/bin/asm_user_auth
         - --uid=
         - --gid=
         - --logtostderr
         - --config=/etc/config/config.yaml
         ports:
         - protocol: TCP
           containerPort: 10003
-        - protocol: TCP
-          containerPort: 10004
-        - protocol: TCP
-          containerPort: 9901
         resources:
           limits:
             cpu: "2.0"

pkg/ext_authz.yaml

@@ -14,3 +14,26 @@ spec:
   - to:
     - operation:
         notPaths: ["/ip"]
+---
+apiVersion: security.istio.io/v1beta1
+kind: AuthorizationPolicy
+metadata:
+  name: ext-authz-authservice
+  namespace: asm-user-auth
+spec:
+  selector:
+    matchLabels:
+      app: authservice
+  action: CUSTOM
+  provider:
+    name: asm-userauth-grpc
+  rules:
+  - to:
+    - operation:
+        paths:
+        - "/_gcp_user_auth/jwks"
+        - "/metricz"
+        - "/healthz"
+        - "/heapz"
+        - "/mallocz"
+        - "/peakheapz"